$ rpki-client -vvf rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.mft File: bqB70D6DR6gFulr0iLMrL5oULvk.mft (raw, json) Hash identifier: FJAzzSYnGAxDRfaJed8rgQjFHP/M7DELFhwc85OflwA= Subject key identifier: BB:F2:71:34:48:30:15:EF:24:C8:2C:C0:EA:AF:13:DC:58:48:F8:FC Authority key identifier: 6E:A0:7B:D0:3E:83:47:A8:05:BA:5A:F4:88:B3:2B:2F:9A:14:2E:F9 Certificate issuer: /CN=A9150080/serialNumber=6EA07BD03E8347A805BA5AF488B32B2F9A142EF9 Certificate serial: 03BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bqB70D6DR6gFulr0iLMrL5oULvk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.mft Manifest number: 03B4 Signing time: Wed 01 May 2024 02:49:52 +0000 Manifest this update: Wed 01 May 2024 02:49:51 +0000 Manifest next update: Wed 08 May 2024 02:49:51 +0000 Files and hashes: 1: bqB70D6DR6gFulr0iLMrL5oULvk.crl (hash: GFgJP6myTlOkdyOls3CbPXzP7+NkjgmrXwLTpk2QpYU=) 2: A29B8E5A46A911EC8F95FC6EC4F9AE02.roa (hash: j0OYbP016uqCUyPAzhyPYu4cMFhnnpV0imO0FVFr9xQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.crl rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bqB70D6DR6gFulr0iLMrL5oULvk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 02:39:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 954 (0x3ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150080/serialNumber=6EA07BD03E8347A805BA5AF488B32B2F9A142EF9 Validity Not Before: May 1 02:49:51 2024 GMT Not After : May 8 02:49:51 2024 GMT Subject: CN=6631adcf-31f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:46:9c:7b:28:1a:88:91:18:a8:82:a8:d1:d7: 13:0d:91:93:e4:ea:17:c1:4d:d8:12:7f:b7:a5:71: 2e:78:04:7b:2c:55:bc:06:e4:52:c4:fd:f5:ce:16: a1:5a:d7:4e:a5:5a:9d:b1:93:20:b8:b3:e3:be:19: d3:b9:b3:e1:74:48:87:32:c6:9e:5d:17:87:fd:2d: 58:1a:f9:8e:85:44:f5:9b:d5:c5:5f:f0:f4:21:54: a6:f6:b8:b5:8c:f4:ca:2c:c4:b4:a5:28:be:69:c2: c9:87:67:db:51:56:71:cc:83:be:06:b6:89:d4:b9: 5d:6b:f2:51:42:8a:e9:ed:9a:3f:ea:55:e6:05:23: 7a:2d:7d:4c:8d:ff:83:9a:c2:c5:41:7c:89:aa:5d: c1:ad:7c:f7:fa:2b:84:82:05:2a:09:a1:1e:0e:3b: 79:de:e1:9d:ae:be:bc:c6:d9:1c:61:50:dd:7c:86: 8c:fb:83:ce:2d:ab:2a:31:14:1e:fa:25:09:68:d5: 0d:f1:c7:4a:d7:1f:ec:03:af:87:f8:36:7f:5d:37: 2d:d7:99:99:4a:b0:25:59:99:df:10:0f:3d:4f:be: db:1b:51:3c:3f:83:8b:0f:97:2d:55:6a:d0:e4:6f: 7d:5d:9c:8b:9a:33:48:60:67:0b:f5:31:6b:f3:ed: ad:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:F2:71:34:48:30:15:EF:24:C8:2C:C0:EA:AF:13:DC:58:48:F8:FC X509v3 Authority Key Identifier: keyid:6E:A0:7B:D0:3E:83:47:A8:05:BA:5A:F4:88:B3:2B:2F:9A:14:2E:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bqB70D6DR6gFulr0iLMrL5oULvk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:0f:5a:07:1b:40:20:97:49:1a:30:80:60:61:3f:29:88:bb: 40:59:a8:6e:42:5c:27:ae:3c:74:15:38:41:c6:5a:00:c1:44: ea:b6:f7:e0:83:bb:61:22:c9:72:a2:18:05:fc:e7:3d:44:29: 4b:22:d5:dd:4f:7b:79:0f:84:cd:47:97:57:da:d1:f0:a8:c7: 78:0e:70:76:07:cc:5a:80:e2:ad:ac:b4:12:4a:20:4c:fc:39: 71:34:d9:1d:1f:22:65:3d:6b:4f:49:82:96:c7:16:55:b6:f6: 69:23:1f:49:36:65:ac:94:6a:c5:fa:c4:28:b2:ba:9b:8a:46: b0:f9:3b:b2:f0:e5:9d:ac:00:1f:b5:ae:3a:76:c7:15:16:2e: d8:c4:d6:e0:9f:03:69:e5:86:9e:99:de:ff:f6:7b:5d:0c:71: 57:c5:e5:01:7b:90:2b:d3:c4:b2:df:07:57:8e:53:75:49:7d: 47:57:5e:56:f2:37:d8:22:6e:19:b3:cf:bb:76:8b:df:c9:be: 2a:fa:3d:60:47:d9:4b:82:e4:5f:8b:73:d9:97:1e:9d:da:35: 8d:d1:1e:aa:99:95:de:2a:83:73:71:3d:b2:9a:60:b0:64:22: c1:75:38:da:1b:76:0c:1a:fb:cc:37:81:b6:3b:0c:a9:f3:61: 26:ab:b4:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTAwODAxMTAvBgNVBAUTKDZFQTA3QkQwM0U4MzQ3QTgwNUJBNUFGNDg4QjMyQjJG OUExNDJFRjkwHhcNMjQwNTAxMDI0OTUxWhcNMjQwNTA4MDI0OTUxWjAYMRYwFAYD VQQDEw02NjMxYWRjZi0zMWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuEaceygaiJEYqIKo0dcTDZGT5OoXwU3YEn+3pXEueAR7LFW8BuRSxP31zhah WtdOpVqdsZMguLPjvhnTubPhdEiHMsaeXReH/S1YGvmOhUT1m9XFX/D0IVSm9ri1 jPTKLMS0pSi+acLJh2fbUVZxzIO+BraJ1Llda/JRQorp7Zo/6lXmBSN6LX1Mjf+D msLFQXyJql3BrXz3+iuEggUqCaEeDjt53uGdrr68xtkcYVDdfIaM+4POLasqMRQe +iUJaNUN8cdK1x/sA6+H+DZ/XTct15mZSrAlWZnfEA89T77bG1E8P4OLD5ctVWrQ 5G99XZyLmjNIYGcL9TFr8+2tLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLvycTRI MBXvJMgswOqvE9xYSPj8MB8GA1UdIwQYMBaAFG6ge9A+g0eoBbpa9IizKy+aFC75 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDA4MC8yMjNFM0E1MDQ2 OUExMUVDQkU4MTM2MEZDNEY5QUUwMi9icUI3MEQ2RFI2Z0Z1bHIwaUxNckw1b1VM dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JxQjcwRDZEUjZnRnVscjBpTE1yTDVvVUx2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDA4MC8yMjNFM0E1MDQ2OUExMUVDQkU4MTM2MEZDNEY5QUUwMi9icUI3MEQ2RFI2 Z0Z1bHIwaUxNckw1b1VMdmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZD1oHG0Agl0kaMIBgYT8piLtAWahuQlwnrjx0FThBxloAwUTqtvfg g7thIslyohgF/Oc9RClLItXdT3t5D4TNR5dX2tHwqMd4DnB2B8xagOKtrLQSSiBM /DlxNNkdHyJlPWtPSYKWxxZVtvZpIx9JNmWslGrF+sQosrqbikaw+Tuy8OWdrAAf ta46dscVFi7YxNbgnwNp5Yaemd7/9ntdDHFXxeUBe5Ar08Sy3wdXjlN1SX1HV15W 8jfYIm4Zs8+7dovfyb4q+j1gR9lLguRfi3PZlx6d2jWN0R6qmZXeKoNzcT2ymmCw ZCLBdTjaG3YMGvvMN4G2Owyp82Emq7S3 -----END CERTIFICATE-----Generated at Wed May 1 03:20:31 2024 by rpki-client on console-fra.rpki-client.org